Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/XL8ORSC8CeYkgeMdnavfE1EewLs.roa
File: XL8ORSC8CeYkgeMdnavfE1EewLs.roa (raw, json)
Hash identifier: kXlXbT2ZkNbQRkspbgQ61BIUyxLejL6RCQNFYdpiTLg=
Subject key identifier: 5C:BF:0E:45:20:BC:09:E6:24:81:E3:1D:9D:AB:DF:13:51:1E:C0:BB
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0B59
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/XL8ORSC8CeYkgeMdnavfE1EewLs.roa
Signing time: Fri 01 Sep 2023 08:36:08 +0000
ROA not before: Fri 01 Sep 2023 08:36:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17416
IP address blocks: 211.78.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2905 (0xb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Sep 1 08:36:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5CBF0E4520BC09E62481E31D9DABDF13511EC0BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:5c:43:3f:3f:e6:7a:a2:f7:33:3e:e6:25:
4e:e8:4e:41:d4:0b:21:bf:f4:e4:f8:58:6c:aa:da:
72:83:55:cf:2b:2d:93:46:25:ed:33:e7:03:9d:1f:
e3:36:0e:a2:be:d6:45:7d:c8:12:23:fb:67:f2:4d:
77:34:73:2a:00:0d:e5:a0:eb:52:90:50:6c:d7:57:
b9:46:50:ba:54:30:7d:3a:72:76:ee:19:39:a8:be:
69:1e:c3:f5:0e:9e:6b:92:63:48:e4:7a:e3:97:1b:
84:43:97:83:73:13:b3:94:ad:0f:20:c7:45:21:49:
70:0e:c0:d1:54:cc:a3:50:d7:92:3e:fb:2b:90:85:
ae:d8:71:14:d8:90:8c:07:2d:21:4a:26:60:63:3c:
7a:ad:3d:65:73:12:07:98:15:90:b8:78:80:9d:5f:
26:79:4a:4a:1b:7b:a2:1b:66:8b:fe:24:02:e2:91:
55:fc:e7:05:5c:f0:99:d9:0a:c0:eb:e4:75:7d:d0:
65:c4:70:91:b7:22:15:a8:37:c0:cc:15:b5:8d:f4:
16:e0:49:30:0e:a2:90:ae:8f:a5:74:84:40:81:84:
62:fc:1c:bf:4a:a6:fd:b4:d4:10:73:c0:cb:f2:1e:
bc:42:d2:3e:52:2a:bb:7f:64:7e:ab:8e:d5:6a:60:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:0E:45:20:BC:09:E6:24:81:E3:1D:9D:AB:DF:13:51:1E:C0:BB
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/XL8ORSC8CeYkgeMdnavfE1EewLs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:63:dc:20:fb:79:1e:65:b3:5f:52:3d:11:9a:cf:86:44:c6:
9c:64:a3:05:59:92:f9:13:84:f3:ca:be:85:1f:be:d5:86:17:
fe:15:c6:1a:b4:c5:c8:66:1c:e6:7f:a3:0f:d4:18:a8:65:e2:
9c:e7:83:d1:dc:ec:f9:4c:b1:46:97:41:b7:26:61:f3:28:55:
76:27:89:13:48:f8:87:44:c5:61:de:4f:46:84:ab:c2:cd:65:
4f:71:d4:a7:5b:93:1b:ab:1e:11:93:11:c2:dd:48:41:7f:7b:
98:d7:5d:85:d8:9d:5e:b8:7f:b5:68:09:44:02:d6:54:ec:bb:
0b:bc:d8:97:f5:ce:44:73:7a:cf:c3:a7:19:dc:74:a9:54:8b:
c7:b8:0d:80:54:67:4b:0f:c3:0f:72:e2:b5:e7:0c:8f:4f:91:
f8:13:6d:3c:e3:6c:9c:fb:cd:20:d4:0e:ad:af:bf:6c:66:9a:
39:a9:94:06:90:9d:e7:14:e8:82:15:36:e9:cf:b8:e3:1a:c7:
76:b3:65:10:84:d1:60:a6:35:1c:e1:b6:a5:64:af:c1:3b:65:
a4:1a:66:b3:c6:ee:d6:cf:0a:cc:61:fd:87:16:05:7b:50:57:
38:91:b5:00:c3:32:e5:07:ef:bf:1d:a0:db:70:75:e0:a5:04:
19:0e:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org